SUCCESS STORY

Globe Telecom Simplifies Endpoint Security
The Search for Centrally Managed
IT Security

Profile:Globe Telecom is a national telco company with over
7,000 employees spread across multiple offices in thePhilippines. It needed to centrally manage automated IT
security capabilities, which includes patching, application
control, and asset management.

Headquartered at Bonifacio Globe City, Taguig, Metro
Manila, Philippines

Without centralized management, the IT team faced many
challenges. For example, when new work tools wereassigned to all the company’s users, there was nomechanism to properly account for and tag each asset, novisibility into complete inventory, no proper tracking, andmost important, no way to ensure that each workstation
was properly patched and applications were blocked fromrunning.

Industry:

Globe’s team used data from Ivanti to build their own
asset tracking for better security management.

Globe Telecom, or Globe, is a major provider oftelecommunications services in the Philippines. Operating
one of the largest mobile, fixed-line, and broadband
networks in the country, it has about 65.8 million mobile,
3.5 million broadband, and 859,000 landline subscribers.

Location:

Telecom

The Right Solution
Website:www.globe.com.ph

As an interim fix, the telco’s IT team deployed Microsoft
System Center Configuration Manager (SCCM). Ultimately

Solutions:though, Globe needed a permanent solution—one that
could be deployed across all systems and provide visibility
into all assets from a central location.

§ Ivanti Endpoint Security

Benefits:§ Centralized patch management and application

control to 10,000 workstations§ Efficiency in patching critical zero-day

vulnerabilities§ Ransomware containment§ Automatic deployment of other security solutions

such as NAC agents, AV, and anti-APT agents toall workstations

ivanti.com
Copyright © 2021, Ivanti. All rights reserved. IVI-2234 01/21

To find the right solution, the telco conducted extensive
research into the endpoint security products space. They
finally settled on Ivanti® Endpoint Security, which provides
fast, effective, and scalable protection from sophisticatedmalware and targeted attacks. It allows organizations toquickly identify and patch vulnerable workstations andservers, and helps prevent unauthorized applications fromexecuting (and the unauthorized use of removable devicesand ports).

SUCCESS STORY“The final deciding factor was actually the proof of concept
I conducted for each solution,” said Jake Kashina-milunda,head of Information Security Assurance & Compliance,
Globe Telecom. “Ivanti’s solution came up on top indelivering my primary requirements, which were ease ofuse, ease of deployment, and cost efficiency.”§ deploy special files to prevent and negate theexecution of the ransomware on an infected
workstation,

Deployment of the Ivanti Solution“We had ZERO ransomware executions despite several
hundred infections,” Kashina-milunda said.

With Ivanti Endpoint Security, the telco team set out toprovide defense-in-depth protection for targeted threats,
combining operational and security capabilities toeffectively reduce the attackable surface area. The
product enabled them to cater to robust centralized patch
management, application control, and device control.
With Altair as Expert Solution Provider, Globe Telecom
deployed Ivanti Endpoint Security across 10,000 nodes—
desktops, laptops, and servers—across six major
corporate sites, three data centers, and several hundred
regional offices.

Better Overall Security
With the implementation of Ivanti Endpoint Security, theoverall security posture of Globe Telecom’s corporate
environment has improved dramatically.
“We have seen an exponential increase in overall
workstation patch compliance over the past two years,”
Kashina-milunda said. “In addition to providing centralized
patch management and application control, IvantiEndpoint Security helped us contain ransomware anddeploy other security solutions such as NAC agents, AV,
and anti-APT agents to all workstations with minimal needfor manual or onsite intervention.”
Another key benefit of the deployment was efficiency inpatching critical zero-day vulnerabilities.
To combat WannaCry during the outbreak, anti-WannaCry
scripts and detection tools were deployed. Kashinamilunda’s team created custom patch jobs to perform very
specific, tactical tasks such as:§ detection and modification of registry keys to disable
SMBv1 and enable/update SMBv2,§ deploy McAfee and update the McAfee AV to catch theransomware entering the environment, and§ force patching of all outdated workstations.

With Ivanti Endpoint Security, Globe’s IT team was alsoable to define and enforce trusted application usage
through whitelist policies to ensure only applications
explicitly authorized or trusted can execute.
“We used application control to block certain applications
from running, such as torrents, internet downloaders, andgames. We are currently working with the IT team to fully
implement application whitelisting across the enterprise,”
Kashina-milunda said.
Globe was able to solve its discovery and inventory control
issues with Ivanti Endpoint Security’s enhanced asset
discovery and agent deployment functionality. IT can scanthe environment for endpoints to gain visibility of managed
and unmanaged systems and deploy agents tounmanaged systems automatically or on a scheduled
basis.

Better Customer Service
Beyond a winning feature set, Ivanti provided the level ofservice Globe sought. “One of the more important deciding
factors for me when choosing a solution is not the brandname nor the positioning of the solution on some ‘magic
quadrant,’ but more the quality of support and ease ofdelivery,” Kashina-milunda added. “Altair and Ivanti haveworked hand-in-hand to ensure my team and I get themost relevant and efficient support when needed, and theease of commercial fulfilment when it counts.”

Learn Moreivanti.com/contact
epg@ivanti.com§ trigger immediate forced reboots to update registries ofall vulnerable workstations,

ivanti.com
Note: Globe Telecom’s results are specific to its total customer environment / experience, of which Ivanti is a part. Individual results may vary based on eachcustomer’s unique environment.